WONDAWho we are
WONDA ("WONDA", "we", "us") operates the WONDA mobile app, which helps dog owners across the UK find and book time in private, securely fenced dog fields. For the purposes of UK data protection law, WONDA is the data controller for the personal information described in this policy.
Data controller: WONDA APP LTD (company number 17478579), 4 Littleham Court, Bideford, Devon, United Kingdom EX39 5EG. Contact: hello@wonda.dog.
Information we collect
We collect only what's needed to run the booking service. No advertising or analytics trackers are used in the app.
| Category | What it includes | When it's collected |
|---|---|---|
| Account details | Email address and password (stored as a secure hash — we never see your plain-text password) | When you sign up or log in |
| Location | Precise device location, only while the app is open | When you grant location permission, to sort fields by distance |
| Booking information | Field booked, date, time, duration and price | When you make or view a booking |
| Favourites | Fields you've saved or liked | When you tap the heart icon on a field |
| Payment information | Card details are entered directly into Stripe's secure payment sheet — WONDA never receives or stores full card numbers | When you pay for a booking |
How we use it
- To create and secure your account, and let you log back in
- To show you dog fields near your current location and sort them by distance
- To process bookings and payments, and to send you a confirmation
- To process a refund if you cancel a paid booking
- To send account-related emails — sign-up confirmation and, where relevant, booking updates
- To keep the app secure and diagnose faults when something goes wrong
Our legal basis
Under UK GDPR, we rely on:
- Contract — processing your account, booking and payment details is necessary to provide the service you've asked for.
- Consent — for precise location access, which you can withdraw at any time in your device settings; the app simply won't be able to sort fields by distance without it.
- Legitimate interests — for basic security and fault-finding, in ways that don't override your own privacy rights.
Who we share it with
We use a small number of trusted service providers to run WONDA. We don't sell your data, and we don't share it for advertising.
| Provider | What they handle | Why |
|---|---|---|
| Supabase | Account authentication and storage | Runs sign-up, login and account deletion |
| Stripe | Payment processing and refunds | PCI-DSS certified; WONDA never sees full card numbers |
| Resend | Transactional email delivery | Sends account confirmation emails |
We may also disclose information where required by law, or to protect the rights, safety or property of WONDA, our users, or others.
International transfers
Some of the providers listed above may process data on servers outside the UK. Where this happens, we rely on safeguards recognised under UK GDPR, such as the UK's International Data Transfer Addendum or an adequacy decision, to keep your data protected to the same standard.
How long we keep it
We keep account and booking information for as long as your account is active, so you can view your booking history and favourites. Payment records are retained by Stripe in line with their own regulatory obligations. If you delete your account, we delete your account record and your locally stored bookings and favourites immediately; some transaction records may be retained by Stripe where required for tax or fraud-prevention purposes.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Erase your account and its data — you can do this yourself at any time from Account → Delete account in the app, which permanently removes your account and locally stored bookings and favourites
- Restrict or object to certain processing
- Port your data to another service
- Withdraw consent for location access at any time, in your device settings
To exercise any of these rights, email hello@wonda.dog. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Children's privacy
WONDA is intended for users aged 18 and over who can enter into a booking contract. We don't knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we'll remove it.
Keeping data secure
Passwords are never stored in plain text. Connections between the app and our service providers are encrypted in transit. Payment card data is handled entirely within Stripe's PCI-DSS certified infrastructure and never passes through our own servers.
Changes to this policy
We may update this policy as WONDA's features change. If we make material changes, we'll update the effective date above and, where appropriate, let you know in the app.
Contact us
Questions about this policy or your data are welcome at hello@wonda.dog.